Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa
File:                     56f3e8d5-c8b8-365b-a649-5cf63058640c.roa (raw, json)
Hash identifier:          Jw/wwd3s1Dh7Y7QXL9/YlboopPL631V48Q2AnkLDyIA=
Subject key identifier:   DC:A1:80:FD:22:F4:3D:82:19:73:A6:96:D1:A6:C2:E3:AE:A1:F0:E1
Certificate issuer:       /CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
Certificate serial:       010D0C9F43285848B35B6B5EB9E32BF4787F0400
Authority key identifier: 87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     394968
IP address blocks:        69.42.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:6b:5e:b9:e3:2b:f4:78:7f:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=e7fb6951-02c5-4298-87f0-6130a2a9b41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2b:19:7e:e4:8f:9f:5e:8d:98:ac:c6:29:99:
                    b6:a4:ff:3f:0b:6c:c5:02:ff:7c:4c:01:7d:e3:53:
                    0f:9b:2d:c4:b9:8a:b7:8b:ef:6a:4e:65:21:e5:f4:
                    3e:9e:7f:73:e8:1e:ac:68:22:02:ed:2a:85:cb:77:
                    be:00:00:a3:59:43:ea:1f:70:88:da:2c:28:53:5f:
                    a6:8e:c9:2f:e2:3f:5e:4e:5f:ae:5c:d9:ae:e7:79:
                    72:29:11:66:ff:f7:33:0e:50:0e:3e:ac:91:20:f1:
                    bb:f3:75:d5:bf:1c:78:80:93:21:58:a4:d6:00:c8:
                    7a:8b:84:a5:e9:d0:2a:78:f5:84:c6:5a:d9:2c:ed:
                    e6:b3:34:4b:d9:d2:df:1f:d7:b5:34:38:5d:cd:a7:
                    52:53:44:40:44:f8:a5:75:41:7f:35:93:60:c1:d9:
                    72:28:6c:46:0a:c3:7c:18:6e:cd:a0:4c:f6:7b:82:
                    d4:81:34:0b:f9:6d:13:7c:83:e4:21:22:af:4a:32:
                    d0:02:cf:e3:bb:eb:e9:0c:2c:16:37:59:99:1b:37:
                    41:2c:9d:17:d0:31:68:1f:9b:6a:45:24:31:41:b8:
                    a7:79:e9:eb:30:94:d6:6d:94:a2:19:54:3d:83:03:
                    7a:95:69:b0:c6:74:54:f0:9a:02:73:56:dd:c3:c6:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A1:80:FD:22:F4:3D:82:19:73:A6:96:D1:A6:C2:E3:AE:A1:F0:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl

            X509v3 Authority Key Identifier:
                keyid:87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:9b:8e:95:09:80:3c:a2:d9:f8:32:37:f4:5e:29:4f:c0:46:
         3d:ff:56:d7:f2:09:a6:32:c6:b4:61:b3:8c:91:4f:e2:a0:b6:
         e0:be:e2:fa:2a:da:16:06:fa:02:13:09:93:db:e2:2a:3c:bd:
         62:65:39:79:d8:82:f6:55:56:ef:7d:e1:fa:35:e4:ad:74:27:
         63:55:68:79:19:11:43:55:2e:94:90:80:4f:e3:34:62:cd:5e:
         e8:08:03:e8:93:79:46:aa:cc:94:10:d3:49:1c:65:cb:e7:ef:
         8c:a8:e7:41:fc:6e:b1:45:19:66:d1:64:d1:02:fa:e8:0f:ae:
         c6:c9:4d:15:c5:aa:b4:d6:97:3e:e1:de:93:82:2f:cc:ff:61:
         4e:43:58:bc:ab:82:f5:2c:16:ec:ac:ae:45:8f:37:21:69:1f:
         79:0f:df:76:62:d3:be:ab:70:6e:ce:e4:3a:fc:1f:99:61:00:
         32:37:92:43:d1:f6:23:57:78:f9:9e:b1:0c:db:b7:ae:8b:77:
         e7:b5:e9:63:be:44:10:ad:53:1f:9e:fd:e9:e0:4f:f0:c0:f7:
         66:c8:87:8c:29:6c:5c:b7:fd:70:9a:c2:d3:e2:82:4f:f2:f6:
         2e:e2:39:ce:20:b3:16:6f:45:b8:51:2e:d9:d8:ef:c4:20:30:
         90:ac:3d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:46 2025 by rpki-client